Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

elastic logstash vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2014-4326
Elasticsearch Logstash 1.0.14 up to and including 1.4.x prior to 1.4.2 allows remote malicious users to execute arbitrary commands via a crafted event in (1) zabbix.rb or (2) nagios_nsca.rb in outputs/.
Elastic Logstash 1.3.3Elastic Logstash 1.1.11Elastic Logstash 1.1.10Elastic Logstash 1.1.3Elastic Logstash 1.1.2Elastic Logstash 1.2.2Elastic Logstash 1.2.1Elastic Logstash 1.1.7Elastic Logstash 1.1.6Elastic Logstash 1.1.0Elastic Logstash 1.0.17Elastic Logstash 1.4.0Elastic Logstash 1.4.1Elastic Logstash 1.0.14Elastic Logstash 1.1.13Elastic Logstash 1.1.12Elastic Logstash 1.1.5Elastic Logstash 1.1.4Elastic Logstash 1.0.16Elastic Logstash 1.0.15Elastic Logstash 1.3.2Elastic Logstash 1.3.1
7.5
CVSSv3
CVE-2015-5378
Logstash 1.5.x prior to 1.5.3 and 1.4.x prior to 1.4.4 allows remote malicious users to read communications between Logstash Forwarder agent and Logstash server.
Elasticsearch Logstash 1.5.1Elastic Logstash 1.4.1Elastic Logstash 1.4.2Elasticsearch Logstash 1.4.3Elasticsearch Logstash 1.5.2Elasticsearch Logstash 1.5.0Elastic Logstash 1.4.0
5.9
CVSSv3
CVE-2015-5619
Logstash 1.4.x prior to 1.4.5 and 1.5.x prior to 1.5.4 with Lumberjack output or the Logstash forwarder does not validate SSL/TLS certificates from the Logstash server, which might allow malicious users to obtain sensitive information via a man-in-the-middle attack.
Elastic Logstash 1.4.0Elastic Logstash 1.4.2Elasticsearch Logstash 1.5.0Elasticsearch Logstash 1.5.1Elastic Logstash 1.4.1Elasticsearch Logstash 1.5.2Elasticsearch Logstash 1.5.3Elasticsearch Logstash 1.4.3Elasticsearch Logstash 1.4.4
5.5
CVSSv3
CVE-2023-46672
An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific circumstances. The prerequisites for the manifestation of this issue are: * Logstash is configured to log in JSON format https://www.elastic.co/guide/en/logstash/current/r...
Elastic LogstashElastic Logstash 7.12.1
7.5
CVSSv3
CVE-2016-10363
Logstash versions before 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting malicious Netflow v5, Netflow v9 or IPFIX packets could perform a denial of service attack on the Logstash instance. The errors resulting from these crafted inputs are not handled by t...
Elastic Logstash
NA
CVE-2015-4152
Directory traversal vulnerability in the file output plugin in Elasticsearch Logstash prior to 1.4.3 allows remote malicious users to write to arbitrary files via vectors related to dynamic field references in the path option.
Elastic Logstash
3.7
CVSSv3
CVE-2021-22138
In Logstash versions after 6.4.0 and prior to 6.8.15 and 7.12.0 a TLS certificate validation flaw was found in the monitoring feature. When specifying a trusted server CA certificate Logstash would not properly verify the certificate returned by the monitoring server. This could ...
Elastic Logstash
7.5
CVSSv3
CVE-2016-1000221
Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information.
Elastic Logstash
7.5
CVSSv3
CVE-2016-1000222
Logstash prior to version 2.1.2, the CSV output can be attacked via engineered input that will create malicious formulas in the CSV data.
Elastic Logstash
6.5
CVSSv3
CVE-2018-3817
When logging warnings regarding deprecated settings, Logstash prior to 5.6.6 and 6.x prior to 6.1.2 could inadvertently log sensitive information.
Elastic Logstash
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook